From: David Galloway Date: Thu, 4 Mar 2021 13:45:14 +0000 (-0500) Subject: ansible: Disable timeout on tmp{watch,reaper} X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=2ff841817ccac2b1d83300aa50ac332b9d689c1f;p=ceph-build.git ansible: Disable timeout on tmp{watch,reaper} From the man page: ``` -T x, --runtime=x Execution of tmpreaper will aborted after x seconds; this is to prevent attacks that create many, many files. By default the timeout is set to 55 seconds. A value of 0 will disable this feature, which is not advised as this feature prevents possible race-conditions between different instances of tmpreaper. ``` So tmpreaper wasn't running for the past week since I set this up because there was so much to clean up that it'd time out. These are Jenkins builders where the primary user already has sudo access so there's no real use to locking down tmpreaper. Signed-off-by: David Galloway --- diff --git a/ansible/examples/slave.yml b/ansible/examples/slave.yml index 6c7580f3..8c71c8c1 100644 --- a/ansible/examples/slave.yml +++ b/ansible/examples/slave.yml @@ -665,7 +665,7 @@ cron: name: "Delete /tmp files that have not been accessed in 30 days" special_time: daily - job: "{{ tmp_cleaner_name }} 30d /tmp/" + job: "{{ tmp_cleaner_name }} --runtime=0 30d /tmp/" when: permanent|bool tags: tmp